PT-2014-7835 · Zeromq · Libzmq

Steamraven · Publicado 2014-10-08 · Atualizado 2024-06-15 · CVE-2014-7203

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions libzmq versions 4.0.x through 4.0.4

Description The issue allows man-in-the-middle attackers to conduct replay attacks due to the lack of unique nonces.

Recommendations For libzmq versions 4.0.x through 4.0.4, update to version 4.0.5 or later to ensure nonces are unique and prevent replay attacks.

Correção

Identificadores relacionados

CVE-2014-7203

OPENSUSE-SU-2024:10038-1

SUSE-FU-2022:0444-1

SUSE-FU-2022:0445-1

Produtos afetados

Libzmq

Referências · 20

• https://github.com/zeromq/libzmq/pull/1189 · Nota
• https://github.com/zeromq/libzmq/issues/1191 · Nota
• https://cve.org/CVERecord?id=CVE-2014-7203 · Nota de Segurança
• http://seclists.org/oss-sec/2014/q3/754 · Nota
• https://security-tracker.debian.org/tracker/CVE-2014-7203 · Aviso do Fabricante
• http://securityfocus.com/bid/70157 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96242 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10038-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-7203 · Aviso do Fabricante
• http://secunia.com/advisories/62262 · Nota
• https://suse.com/security/cve/CVE-2014-7203 · Nota
• http://lists.opensuse.org/opensuse-updates/2014-11/msg00027.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-9721 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-7203 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2014-7203 · Aviso do Fabricante